Author Topic: Wayward daughter, persistant trojan! (Read 2562 times)

LuckyLefty · « **on:** July 14, 2004, 10:37:31 PM »

No not that type of trojan.

The type that gets in your computer and won't let up.

My daughter asked, "can I use your computer just for a few minutes?"

3 work days later I can barely get to this site and barely work.

This trojan is tricky persistent and great if you are on their side.

If you've missed me that's where I've been, unable to get on.

If you haven't well that's OK too!

Hope I get it resolved.

REgards,

Luckylefty
PS some of the things to watch out for. A bunch of stuff on your desktop you've never seen before. o, O.bat, Secondthougths, PersonalSearch, then followed by a message that you need to download a program to eliminate spys on your system, called Spytools. Once it finds all the stuff you just got on your computer it tells you that this Spyware which was free costs to get rid of the stuff you've just found. When you say "NO" it sends and opens a ton of Internet Explorers on you fast stealing all of your memory and hardfile resources. I've been running with my cable modem disconnected and could get by but only off the internet!

Jeffrevs · « **Reply #1 on:** July 15, 2004, 01:40:53 PM »

yup! I'm to the point of getting a new cpu!
--------------------
JEFF
There is doing in not doing

Urethane Game · « **Reply #2 on:** July 15, 2004, 01:49:44 PM »

Follow that up with Spybot Search and Destroy found at:

http://www.safer-networking.org/en/index.html

And specifically for browser hijacks:
http://www.spychecker.com/program/winsockxpfix.html

You have found out that some spyware programs are actually spyware maquerading as fixes. Hope that helps.

--------------------
got revs?

LuckyLefty · « **Reply #3 on:** July 15, 2004, 10:49:24 PM »

Had a pro come in and install Spybot and do all sorts of cleaning.

She showed me how often we are under attack each day and also stated that
Internet Explorer is the most attacked browser with lots of holes.

She was surprised I had made it this far.

REgards,

Luckylefty
PS I spent $322 for her services. Almost as much as a new computer.
But as she explained I would have left myself open again. Now I have the tools and understanding of what's going on to protect this computer AND the next!
PPS Thanks to all for their concern. Even some of my Kerry voting pals!

trash heap · « **Reply #4 on:** July 15, 2004, 10:50:35 PM »

Okay! I am going to add my expert advice.

First goto www.trendmicro.com. (Take care of viruses, trojan's, zombies, worms, etc..) They have a free online virus scan utility. It will wipe out any problem on your machine. It is right on their home page.

Purchase anti-virus software. Mcafee or Norton.

Next, Get a Firewall. www.Zonelabs.com has EXCELLENT free firewall software you can download. Its under Downloads as ZONEALARM. A firewall is essential if you have a high speed internet connection. This firewall is consider the best.

Once Firewall is up. You Need to get software to remove spy ware. Goto www.lavasoftusa.com. You will need to download ad-aware (Its free). This software will scan your pc and remove any spy ware.

Doing these steps should eliminate problems on your machine. Be careful of any other software claiming to remove spy ware. Sometimes it is spy ware in itself. Ad-aware is not.

These are all excellent software to keep you computer running smooth. It has worked for me.

If you have any questions?
Please contact me.

--------------------
Trash Heap (exflinger wannabe)

thfonz98 · « **Reply #5 on:** July 16, 2004, 03:19:11 AM »

i use avast! antivirus...also downloadable via www.download.com

in conjunction with spybot and adaware

Siniak · « **Reply #6 on:** July 16, 2004, 07:41:04 AM »

I'd like to suggest using something other than IE for your daily browsing. As someone said, IE is one of the most targeted browsers because it has so many users.

http://www.mozilla.org/products/firefox/

People do often complain about their favorite sites not being rendered properly in firefox or other alternate browser. Usually the problem here is not firefox, but the web developers using either IE specific code, or writing bad code. One can either use IE for these sites, or live with some bits and pieces being out of place.

Edited on 7/16/2004 7:36 AM

michelle · « **Reply #7 on:** July 16, 2004, 10:03:02 AM »

I went through that with one of the office computers...went through the regular virus scan, AdAware, Spybot and HijackThis to figure out where everything was hiding. A couple of registry keys had to be corrected/deleted.

I'd bet that before you finish the project, you are going to find allaboutsearching in the registry and tied into the IE homepage.

There were also a couple of other items that I was reluctant to delete without consulting with the outsourced computer docs the office uses...stuff that was not mentioned anywhere in google.

Jeffrevs · « **Reply #8 on:** July 16, 2004, 10:17:25 AM »

has anyone had "yoursearch.com" search engine take over your home page!!??

ARRRRRGGGGH!!
--------------------
JEFF
There is doing in not doing

LuckyLefty · « **Reply #9 on:** July 16, 2004, 10:44:36 AM »

A search toolbar had taken over my homepage.

A bunch of icons had arrived on my icon.

All of a sudden warnings about spyware on my system.

Followed by an offer for a Free Spyware elimination tool called Spytools.

NOw you run this thing it finds all the things new on the system and then wants to charge you to delete them.

It is actually creating and then wanting to charge you to get rid of them.

The oldest scam in the book, hi teched to today!

rEgards,

Luckylefty

cgilyeat · « **Reply #10 on:** July 16, 2004, 10:53:19 AM »

In addition to the ones aleady mentioned, thre is a product from WebRoot (not free - $29.95) called Spy Sweeper. I've used Ad-ware as well, but have found Spy Sweeper to have been well worth the cost.

BowlDiddly · « **Reply #11 on:** July 16, 2004, 11:08:24 AM »

Working for a public school district I deal with spyware and virus removal on a daily basis. Here are all the free utilities I recommend and run for removal.

Ad-aware 6.0: Picks up on a few things that Spybot doesn't
http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

Spybot Search and Destroy: Picks up on a few things that Adaware doesn't
http://www.download.com/Spybot-Search-Destroy/3000-8022-10122137.html?part=dl-spybot&subj=dl&tag=but

Hijack This (Very Helpful utility......but takes a skilled person to be able to desipher and tell you what to remove....If you do install and run it you can copy and paste the detection list into a document then e-mail it to me (in my profile). I'll forward it on to a couple of trained HJT specialists that I corrispond with then reply to you with their recommendations on what to remove: http://www.spychecker.com/program/hijackthis.html

CWShredder: Scans and removes many of the CoolWebSearch variants.
http://www.majorgeeks.com/download4086.html

Mozilla Firefox: http://www.mozilla.org/products/firefox/

If you do install and run these programs be sure that you go into their update areas and get the latest updates (since new spyware comes around everyday they are frequently updated). I also strongly recommend that you run these items in Safe Mode. Hope this helps.
--------------------
...Bowling is my winter job while Golf is my summer passion...BD

jttfb

FBM357 · « **Reply #12 on:** July 16, 2004, 12:20:24 PM »

Browser = MOZILLA or FIREFOX
AntiVirus = Norton (avoid their suite, it's a resource hog!) or McAfee
Firewall = ZoneAlarm (really good product - free)
Spyware = SpyBot and Adaware (both are the best in my opinion)

I've tried several firewalls (Norton, ZoneAlarm, Sygate and eArmor which I'm currently using). Like someone mentioned, IE is always under attack (i.e. security vulnerabilities, etc.). Using alternative browsers seems to work fine. I tried Opera, but learned too many sites didn't work. Mozilla and Firefox both work using Netscape technology and for the most part compatible with IE. Besides, it's much quicker and faster than IE. Mozilla comes with email engine as well (i.e. Thunderbird).

Vernon

--------------------
"If you want SQUARE work, you DON'T CUT CORNERS!!!"....

LuckyLefty · « **Reply #13 on:** July 17, 2004, 01:13:45 AM »

I had a couple of people around home comment that I could have almost purchased a new computer for the price I paid to fix this problem.

(This may apply to your thinking also Jeffrevs).

I thought about that and replied.

"But then it could happen to me again".

Now that I've seen it done and had demonstrated the number of attacks on my computer, now I'm prepared to protect my computer and future computers with the free software that was put on my computer by this pro. (And also kindly mentioned by my fellow ballreviews memebers).

More importantly, I know where to find it, how to get it, and how to put it on a future computer too!

A great investment on my part I felt!

rEgards,

Luckylefty
PS but there was that new Columbia ball I wanted! Drat!

Author Topic: Wayward daughter, persistant trojan! (Read 2562 times)

LuckyLefty

Wayward daughter, persistant trojan!

Jeffrevs

Re: Wayward daughter, persistant trojan!

Urethane Game

Re: Wayward daughter, persistant trojan!

LuckyLefty

Re: Wayward daughter, persistant trojan!

trash heap

Re: Wayward daughter, persistant trojan!

thfonz98

Re: Wayward daughter, persistant trojan!

Siniak

Re: Wayward daughter, persistant trojan!

michelle

Re: Wayward daughter, persistant trojan!

Jeffrevs

Re: Wayward daughter, persistant trojan!

LuckyLefty

Re: Wayward daughter, persistant trojan!

cgilyeat

Re: Wayward daughter, persistant trojan!

BowlDiddly

Re: Wayward daughter, persistant trojan!

BD

jttfb

FBM357

Re: Wayward daughter, persistant trojan!

LuckyLefty

Re: Wayward daughter, persistant trojan!